Reverse traceroute

Traceroute is the most widely used Internet diagnostic tool today. Network operators use it to help identify routing failures, poor performance, and router misconfigurations. Researchers use it to map the Internet, predict performance, geolocate routers, and classify the performance of ISPs. However, traceroute has a fundamental limitation that affects all these applications: it does not provide reverse path information. Although various public traceroute servers across the Internet provide some visibility, no general method exists for determining a reverse path from an arbitrary destination. In this paper, we address this longstanding limitation by building a reverse traceroute system. Our system provides the same information as traceroute, but for the reverse path, and it works in the same case as traceroute, when the user may lack control of the destination. We use a variety of measurement techniques to incrementally piece together the path from the destination back to the source. We deploy our system on PlanetLab and compare reverse traceroute paths with traceroutes issued from the destinations. In the median case our tool finds 87% of the hops seen in a directly measured traceroute along the same path, versus only 38% if one simply assumes the path is symmetric, a common fallback given the lack of available tools. We then illustrate how we can use our reverse traceroute system to study previously unmeasurable aspects of the Internet: we present a case study of how a content provider could use our tool to troubleshoot poor path performance, we uncover more than a thousand peer-to-peer AS links invisible to current topology mapping efforts, and we measure the latency of individual backbone links with average error under a millisecond.

[1]  Ratul Mahajan,et al.  Inferring link weights using end-to-end measurements , 2002, IMW '02.

[2]  Jean-Jacques Pansiot,et al.  On routes and multicast trees in the Internet , 1998, CCRV.

[3]  David Wetherall,et al.  Towards IP geolocation using delay and topology measurements , 2006, IMC '06.

[4]  Paul Barford,et al.  Network discovery from passive measurements , 2008, SIGCOMM '08.

[5]  Jie Gao,et al.  Moving beyond end-to-end path information to optimize CDN performance , 2009, IMC '09.

[6]  Rob Sherwood,et al.  Fixing ally's growing pains with velocity modeling , 2008, IMC '08.

[7]  kc claffy,et al.  Internet-Scale IPv4 Alias Resolution with MIDAR: System Architecture - Technical Report , 2011 .

[8]  Walter Willinger,et al.  In search of the elusive ground truth: the internet's as-level connectivity structure , 2008, SIGMETRICS '08.

[9]  Mark Crovella,et al.  Efficient algorithms for large-scale topology discovery , 2004, SIGMETRICS '05.

[10]  Donald F. Towsley,et al.  Network tomography on general topologies , 2002, SIGMETRICS '02.

[11]  FdidaSerge,et al.  Constraint-based geolocation of internet hosts , 2006 .

[12]  Arun Venkataramani,et al.  iPlane: an information plane for distributed services , 2006, OSDI '06.

[13]  Ratul Mahajan,et al.  User-level internet path diagnosis , 2003, SOSP '03.

[14]  Robert Nowak,et al.  Internet tomography , 2002, IEEE Signal Process. Mag..

[15]  Brice Augustin,et al.  IXPs: mapped? , 2009, IMC '09.

[16]  Ming Zhang,et al.  PlanetSeer: Internet Path Failure Monitoring and Characterization in Wide-Area Services , 2004, OSDI.

[17]  Randy H. Katz,et al.  IP Options are not an option , 2005 .

[18]  Yin Zhang,et al.  The Stationarity of Internet Path Properties: Routing, Loss, and Throughput , 2000 .

[19]  Michalis Faloutsos,et al.  On routing asymmetry in the Internet , 2005, GLOBECOM '05. IEEE Global Telecommunications Conference, 2005..

[20]  Rob Sherwood,et al.  Touring the internet in a TCP sidecar , 2006, IMC '06.

[21]  Ming Zhang,et al.  Effective Diagnosis of Routing Disruptions from End Systems , 2008, NSDI.

[22]  Brice Augustin,et al.  Avoiding traceroute anomalies with Paris traceroute , 2006, IMC '06.

[23]  Fabián E. Bustamante,et al.  Taming the torrent: a practical approach to reducing cross-isp traffic in peer-to-peer systems , 2008, SIGCOMM '08.

[24]  Emin Gün Sirer,et al.  Octant: A Comprehensive Framework for the Geolocalization of Internet Hosts , 2007, NSDI.

[25]  Yuval Shavitt,et al.  DIMES: let the internet measure itself , 2005, CCRV.

[26]  Robert Beverly,et al.  Understanding the efficacy of deployed internet source address validation filtering , 2009, IMC '09.

[27]  Ming Zhang,et al.  Uncovering Performance Differences Among Backbone ISPs with Netdiff , 2008, NSDI.

[28]  Randy Bush,et al.  iSPY: Detecting IP Prefix Hijacking on My Own , 2008, IEEE/ACM Transactions on Networking.

[29]  Ratul Mahajan,et al.  Colt ? ? ? ? ? ? ◦ DTAG ? ◦ • ◦ ? ? ? ? ! ◦ ? ? ? ◦ ◦ ? ? Eqip ? ? ? ? ? ? , 2003 .

[30]  Michalis Faloutsos,et al.  A Systematic Framework for Unearthing the Missing Links: Measurements and Impact , 2007, NSDI.

[31]  Rob Sherwood,et al.  Discarte: a disjunctive internet cartographer , 2008, SIGCOMM '08.

[32]  Randy H. Katz,et al.  An algebraic approach to practical and scalable overlay network monitoring , 2004, SIGCOMM '04.

[33]  Bruce M. Maggs,et al.  Measuring an ip network in situ , 2005 .

[34]  David Wetherall,et al.  Studying Black Holes in the Internet with Hubble , 2008, NSDI.